Lucene search
K

37 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2023-37019

Malicious code in bioql PyPI...

5.3CVSS9.1AI score0.00205EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/08/30 6:19 p.m.2 views

CVE-2025-58202

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
NVD
NVD
added 2025/08/27 6:15 p.m.1 views

CVE-2025-58202

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

4.3CVSS0.00026EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/08/27 5:45 p.m.1 views

CVE-2025-58202 WordPress Simple Page Access Restriction Plugin <= 1.0.32 - Cross Site Request Forgery (CSRF) Vulnerability

Cross-Site Request Forgery CSRF vulnerability in Plugins and Snippets Simple Page Access Restriction simple-page-access-restriction allows Cross Site Request Forgery.This issue affects Simple Page Access Restriction: from n/a through = 1.0.32...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
CVE
CVE
added 2025/08/27 5:45 p.m.9 views

CVE-2025-58202

CVE-2025-58202 describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress plugin Simple Page Access Restriction , affecting versions up to and including 1.0.32 . The CVE notes a CSRF flaw that could allow unauthorized actions on behalf of authenticated users; the published CVSS ...

4.3CVSS5.9AI score0.00026EPSS
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.3 views

Malicious code in 11ty-simple-page-post-creator (npm)

The package 11ty-simple-page-post-creator was found to contain malicious code...

7AI score
Exploits0
RedhatCVE
RedhatCVE
added 2025/05/23 9:32 a.m.5 views

CVE-2024-0965

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.21 via the REST API. This makes it possible for unauthenticated attackers to bypass the plugin's page restriction and view page content...

5.3CVSS6.8AI score0.00336EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 1:44 a.m.3 views

CVE-2023-32798

Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0...

5.3CVSS8.5AI score0.00205EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/05/23 12:44 a.m.4 views

CVE-2022-2341

The Simple Page Transition WordPress plugin through 1.4.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.7AI score0.00201EPSS
Exploits2References1
RedhatCVE
RedhatCVE
added 2025/02/05 3:17 a.m.2 views

CVE-2024-51633

Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...

7.1CVSS5.9AI score0.00144EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/12/18 7:2 a.m.17 views

CVE-2024-11295 Simple Page Access Restriction <= 1.0.29 - Unauthenticated Content Restriction Bypass to Sensitive Information Exposure

The Simple Page Access Restriction plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 1.0.29 via the WordPress core search feature. This makes it possible for unauthenticated attackers to extract sensitive data from posts that have been...

5.3CVSS0.0061EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.2 views

WordPress plugin Simple Page Access Restriction 信息泄露漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

5.3CVSS7.4AI score0.0061EPSS
Exploits0References2
NVD
NVD
added 2024/12/13 3:15 p.m.5 views

CVE-2023-32798

Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0...

5.3CVSS0.00205EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2024/12/13 3:15 p.m.1 views

CVE-2023-32798

Missing Authorization vulnerability in 10up Simple Page Ordering simple-page-ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through = 2.5.0...

5.3CVSS5.8AI score0.00205EPSS
Exploits0References3
Cvelist
Cvelist
added 2024/12/13 2:23 p.m.17 views

CVE-2023-32798 WordPress Simple Page Ordering plugin <= 2.5.0 - Broken Access Control vulnerability

Missing Authorization vulnerability in 10up Simple Page Ordering allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Page Ordering: from n/a through 2.5.0...

5.3CVSS0.00205EPSS
Exploits0References1
CVE
CVE
added 2024/12/13 2:23 p.m.40 views

CVE-2023-32798

CVE-2023-32798 is a vulnerability in the WordPress plugin Simple Page Ordering. Public sources identify the affected software as Simple Page Ordering

5.3CVSS8.5AI score0.00205EPSS
Exploits0References1
CNNVD
CNNVD
added 2024/12/13 12:0 a.m.1 views

WordPress plugin Simple Page Ordering 安全漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists ...

5.3CVSS8AI score0.00205EPSS
Exploits0References1
NVD
NVD
added 2024/11/19 5:15 p.m.5 views

CVE-2024-51633

Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...

7.1CVSS0.00144EPSS
Exploits0References1
CVE
CVE
added 2024/11/19 4:32 p.m.41 views

CVE-2024-51633

CVE-2024-51633 describes a CSRF-driven Stored XSS in WordPress plugin Simple Page Specific Sidebars (affected versions: up to 2.14.1). The vulnerability arises from CSRF in the plugin that can lead to stored XSS content. Public sources confirm the vulnerability exists through 2.14.1, with patch s...

7.1CVSS5.9AI score0.00144EPSS
Exploits0References1
Cvelist
Cvelist
added 2024/11/19 4:32 p.m.21 views

CVE-2024-51633 WordPress Simple Page Specific Sidebars plugin <= 2.14.1 - CSRF to Stored Cross Site Scripting (XSS) vulnerability

Cross-Site Request Forgery CSRF vulnerability in ivycat Simple Page Specific Sidebars page-specific-sidebars allows Stored XSS.This issue affects Simple Page Specific Sidebars: from n/a through = 2.14.1...

7.1CVSS0.00144EPSS
Exploits0References1
Rows per page
Query Builder